"Octane is a web design, development and internet marketing consultancy started in June 1999."
My name's Wayne Smallman and I sell ideas that change the way companies do business, usually in the form of novel web applications.
I'm also a writer for business publications (both web and print), as well as a consultant, adviser and trusted ally to my clients.
Keeping yourself and your business safe and secure is essential, right? So why is it so many people use obvious, sometimes dangerously simply passwords? Here’s a few ideas on how to keep yourself and your business website safe.
But first, a story. Well, before the story, let’s have some background:
“According to a new analysis, one out of five web users still decides to leave the digital equivalent of a key under the doormat: they choose a simple, easily guessed password like ‘abc123′, ‘iloveyou’ or even ‘password’ to protect their data.”
When I first read about some of the terrible passwords people are still using, I really wasn’t surprised.
In one notable, recent example, I was asked by a former client to “fix” a web application I was developing so there was only the one username and password for everyone. At the time of being asked, I’d only set one account up, but someone had decided to share this account and soon after, people were signing in with the same account details.
The problem is, due to the security options I’d put in place, each person that signed in signed out the one previous. This was because the system couldn’t deal with two people signing in with the same account details. The client was dismayed.
“Why can’t we all sign in with the same details?”
They asked.
“Because the system doesn’t allow more than one person to have the same username and password.”
I replied.
“Can’t they just type their name in after they’ve signed in?”
They enquired.
“That’s the whole point of having a username; so the system knows who each user is.”
I replied calmly, trying not to sound patronizing or condescending. But the question, I suppose, is: why did they refuse to have a unique account for each member of staff?
Being a very large business that bestrides continents, they have thousands of staff all over the world, so issuing usernames and passwords for each member of staff would be a considerable undertaking, one their own IT people refused to manage, even though it was firmly within their remit. And, ultimately, no one could be bothered with having a new account to remember, on top of the ones they already have.
In the end, I came up with another solution, one that didn’t rely on usernames and passwords, one that was arguably as secure, but came with unique problems all of its own.
Consider what you stand to lose if someone snags the password for your computer. For most people nowadays, they stand to lose just about everything.
So what can you do to stay safe and secure on the web? Here’s a collection of ideas for saving and storing all of those usernames and passwords to all of those websites and web applications you sign up to, as well as staying secure while using a computer:
Got a security tip to share? Let us know how you stay safe…
Image used courtesy of Flickr and MissTessmacher.
January 26th, 2010 at 11:54 pm
I use Keychain now that I have a Mac (and because you told me to, Wayne!)
It’s brilliant, except for when I’m on a different computer and realise I haven’t learned any of my passwords off by heart.
That’s the toughest thing for me. I know we don’t have to learn hundreds of phone numbers anymore, but there’s still not all that much room for learning reams of alphanumeric, lowercase and uppercase strings with the odd punctuation mark thrown in.
Is there a portable (and safe) solution for those without superhuman memory banks?